PT-2022-23940 · Trend Micro · Trend Micro Security

Izobashi + 1 · Published 2022-08-31 · Updated 2022-09-22 · CVE-2022-37347

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Trend Micro Security versions 2021 through 2022

Description The issue allows an attacker to read sensitive information from other memory locations and cause a crash on an affected machine. It is an Out-Of-Bounds Read Information Disclosure issue.

Recommendations For Trend Micro Security versions 2021 and 2022, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2022-37347

ZDI-22-1176

Affected Products

Trend Micro Security

References · 8

• https://osv.dev/vulnerability/CVE-2022-37347 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-22-1176 · Security Note
• https://helpcenter.trendmicro.com/en-us/article/tmka-11058 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-37347 · Security Note
• https://t.me/cvenotify/36463 · Telegram Post
• https://t.me/cibsecurity/50081 · Telegram Post
• https://t.me/cibsecurity/50083 · Telegram Post
• https://t.me/cvenotify/36462 · Telegram Post